Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/808C1E22BDCC11EAB486CA81C4F9AE02.roa
File: 808C1E22BDCC11EAB486CA81C4F9AE02.roa (raw, json)
Hash identifier: MOcUzZvmWA7Dw5UXZC9IzWT3GsOGSVrVxKzZ8l1CyRo=
Subject key identifier: 6B:30:A5:14:BB:9D:C9:4A:69:8F:2B:C5:D8:3E:43:83:00:14:41:66
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6D1C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/808C1E22BDCC11EAB486CA81C4F9AE02.roa
Signing time: Wed 10 May 2023 16:27:43 +0000
ROA not before: Wed 10 May 2023 16:27:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137610
IP address blocks: 103.117.64.0/22 maxlen: 24
2407:3140::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Apr 2024 09:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27932 (0x6d1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:27:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc5ff-fa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:79:0d:83:45:ff:b7:92:15:ef:7f:25:b7:
0f:4a:8b:3c:e1:97:c0:b9:1b:e1:0e:ec:42:7e:de:
cc:33:b5:db:3c:ec:8a:65:a2:a1:77:6c:81:1d:96:
31:76:31:9c:9c:19:22:04:0b:ed:a6:af:cb:02:49:
0e:5f:02:fe:19:31:38:86:02:19:5b:fc:ae:c1:6b:
66:d1:f5:f7:b9:dd:05:bd:3d:1b:22:4c:a3:57:bc:
28:57:9c:d0:8c:1b:14:d7:8b:31:c5:12:07:e6:c8:
cd:d9:41:dd:b0:22:d5:83:b1:61:5b:56:b1:63:34:
12:a9:8c:7c:73:b2:00:2b:16:00:05:6b:29:4c:f4:
0c:76:82:27:33:35:4e:05:cd:be:66:10:6d:1e:46:
09:56:14:68:e0:2e:6a:cd:f1:92:be:e7:87:79:1c:
a4:24:50:f9:cd:05:2c:c6:6c:2a:bf:b3:f0:50:15:
7e:63:0e:77:55:dd:93:6d:51:11:d3:65:83:e7:da:
41:48:50:a7:eb:19:4a:1c:48:c5:a0:f0:3e:97:10:
1e:5d:b0:78:94:69:71:4a:d3:5f:3d:3a:04:23:3d:
bc:d8:e7:9e:7b:4f:02:a4:ca:2d:7b:b3:e5:95:88:
7d:1a:39:7d:e8:c9:f8:76:49:de:eb:6e:7e:ff:45:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:30:A5:14:BB:9D:C9:4A:69:8F:2B:C5:D8:3E:43:83:00:14:41:66
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/808C1E22BDCC11EAB486CA81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.64.0/22
IPv6:
2407:3140::/32
Signature Algorithm: sha256WithRSAEncryption
3c:ed:10:f2:2a:ce:73:65:48:3e:3b:a1:b4:6d:a1:46:e9:0e:
49:d4:0c:22:08:42:b4:01:f9:60:81:a6:47:23:24:c1:1d:03:
1d:48:29:16:0c:d3:b7:e8:c9:af:ff:cd:88:4e:f6:4e:d5:5c:
28:6d:26:84:b7:d8:54:df:1c:a3:ef:4f:c0:f1:2e:06:2c:27:
f6:7f:37:14:a9:cc:7f:79:82:db:16:f1:a1:3b:1a:ca:a0:ac:
26:6d:40:5a:b6:02:b6:aa:65:ca:c2:be:09:c8:1c:ef:d7:24:
16:5a:dd:60:ef:ed:9c:4c:6e:f7:a6:7f:6c:79:30:2a:40:52:
00:10:da:3a:35:9c:9d:3f:1d:ed:5f:08:af:b9:16:63:cd:7c:
5b:99:c2:32:05:35:12:3a:b2:ea:fe:93:0a:54:33:50:40:11:
7b:6c:f7:84:5d:26:5b:7d:21:2b:02:25:5e:b5:cb:bb:dc:73:
22:82:36:b4:c9:6c:6a:7e:50:a6:3e:ab:a5:36:65:9f:84:60:
40:ec:bb:92:d9:3d:6f:4a:e7:ec:75:87:99:27:4f:eb:f1:75:
60:e7:75:85:ce:01:55:14:ec:69:4f:3f:98:c5:39:1c:33:cd:
f7:7f:a9:67:00:9b:9f:ce:8e:0e:c2:f2:b4:a8:0f:61:b0:c5:
b2:08:e4:da
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICbRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYyNzQzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzVmZi1mYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzAd5DYNF/7eSFe9/JbcPSos84ZfAuRvhDuxCft7MM7XbPOyKZaKhd2yBHZYx
djGcnBkiBAvtpq/LAkkOXwL+GTE4hgIZW/yuwWtm0fX3ud0FvT0bIkyjV7woV5zQ
jBsU14sxxRIH5sjN2UHdsCLVg7FhW1axYzQSqYx8c7IAKxYABWspTPQMdoInMzVO
Bc2+ZhBtHkYJVhRo4C5qzfGSvueHeRykJFD5zQUsxmwqv7PwUBV+Yw53Vd2TbVER
02WD59pBSFCn6xlKHEjFoPA+lxAeXbB4lGlxStNfPToEIz282Oeee08CpMote7Pl
lYh9Gjl96Mn4dkne625+/0XAlwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGswpRS7
nclKaY8rxdg+Q4MAFEFmMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODA4QzFFMjJC
RENDMTFFQUI0ODZDQTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJndUAwDQQCAAIwBwMFACQHMUAwDQYJKoZIhvcNAQELBQAD
ggEBADztEPIqznNlSD47obRtoUbpDknUDCIIQrQB+WCBpkcjJMEdAx1IKRYM07fo
ya//zYhO9k7VXChtJoS32FTfHKPvT8DxLgYsJ/Z/NxSpzH95gtsW8aE7GsqgrCZt
QFq2AraqZcrCvgnIHO/XJBZa3WDv7ZxMbvemf2x5MCpAUgAQ2jo1nJ0/He1fCK+5
FmPNfFuZwjIFNRI6sur+kwpUM1BAEXts94RdJlt9ISsCJV61y7vccyKCNrTJbGp+
UKY+q6U2ZZ+EYEDsu5LZPW9K5+x1h5knT+vxdWDndYXOAVUU7GlPP5jFORwzzfd/
qWcAm5/Ojg7C8rSoD2GwxbII5No=
-----END CERTIFICATE-----
Generated at Tue Apr 2 14:43:59 2024 by rpki-client on console-ams.rpki-client.org